$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa File: a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa (raw, json) Hash identifier: xS9b3OT92hA5MAr8zW3jfzdplpW7f9KoeLZSprFg9bA= Subject key identifier: F5:E9:DF:A9:6D:5E:1A:7F:92:AA:01:8C:EF:EF:8F:C2:42:98:33:AB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B990D987C21C19188280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 168.87.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b9:90:d9:87:c2:1c:19:18:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5d7855a1-df7b-482c-acad-74cef7bca73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:8a:94:c8:ea:80:bc:5f:71:2e:ef:90:29: f9:d5:3f:e8:d5:15:bc:3f:d5:af:52:6b:dd:7a:95: a4:15:7c:db:f4:60:aa:1f:0d:79:c4:82:16:cb:c0: 96:fc:10:47:ac:05:d5:21:27:df:72:d4:b1:be:71: 33:a9:fa:20:d6:ff:94:11:65:08:10:d9:3a:af:33: 48:68:10:35:21:71:e3:64:26:49:28:bc:6b:70:c1: 11:37:3f:de:08:33:dd:af:73:97:99:a7:88:bf:03: 97:9c:f9:21:63:d5:26:19:47:83:27:65:90:c8:41: fc:a8:69:67:79:f6:ca:09:d3:92:4c:5a:b8:73:60: 24:7b:98:26:7f:fa:20:c6:31:c4:ab:b1:19:cb:39: df:b7:9f:2b:9a:24:7b:f0:77:a5:2f:58:56:ae:c7: 17:0e:b5:8a:20:cc:e2:09:7f:18:78:5f:08:d6:b9: 77:87:02:80:67:66:43:ac:ae:1e:22:c2:c3:17:8f: d1:34:f8:67:ee:87:de:3a:d7:64:d0:41:e6:a7:a2: 36:ce:07:89:93:28:02:ab:03:d0:dc:11:9a:02:4c: 1f:ce:b9:5e:4f:d1:be:7b:b9:c3:9a:4b:f4:81:5b: a1:c0:f8:19:cb:07:1b:76:a7:f4:62:cd:38:f7:c0: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E9:DF:A9:6D:5E:1A:7F:92:AA:01:8C:EF:EF:8F:C2:42:98:33:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:68:e0:4f:40:29:63:f4:9c:83:84:19:12:76:40:91:54:97: 29:c8:29:19:b8:5d:85:bc:4c:ad:a5:71:0f:00:d2:96:6d:66: cf:44:3f:27:af:67:df:4c:66:d9:2b:47:49:66:db:b6:46:b6: 37:a0:ac:e0:7b:2c:af:21:aa:08:eb:95:3e:ec:c1:68:aa:b1: 65:6c:42:19:d6:73:c8:24:fc:20:96:fc:45:b3:e2:c1:97:d5: 4e:9c:de:27:df:b7:a1:ba:a3:d2:27:ba:08:3f:50:3e:09:42: d6:be:9d:f8:62:bf:31:19:b2:7c:95:1a:70:9d:60:84:81:b1: 45:e3:a9:33:85:c2:a0:74:ff:c7:b1:01:60:c7:4c:3f:4e:8f: 3a:01:f1:ac:13:9b:92:d0:5b:08:bd:f5:8b:6c:05:e6:a3:ea: 8d:8f:b9:84:30:63:8d:1d:b2:44:f8:c8:21:b9:c4:1f:71:3f: d6:74:0e:d2:d8:66:e7:21:95:0b:88:3a:be:36:9a:83:6b:bb: 2e:54:f7:9c:f3:dd:46:13:b5:24:de:df:9f:b4:cf:f7:8d:20: c2:bf:42:62:aa:f5:7f:33:28:15:40:9d:67:d7:44:69:56:86: a8:ea:67:fb:5a:c4:67:ee:15:e3:f9:9b:92:6e:bb:d4:57:c1: 82:4a:cf:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrmQ2YfCHBkYgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NWQ3ODU1YTEtZGY3Yi00ODJjLWFjYWQtNzRjZWY3YmNhNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2mKlMjqgLxfcS7vkCn51T/o1RW8P9WvUmvd epWkFXzb9GCqHw15xIIWy8CW/BBHrAXVISffctSxvnEzqfog1v+UEWUIENk6rzNI aBA1IXHjZCZJKLxrcMERNz/eCDPdr3OXmaeIvwOXnPkhY9UmGUeDJ2WQyEH8qGln efbKCdOSTFq4c2Ake5gmf/ogxjHEq7EZyznft58rmiR78HelL1hWrscXDrWKIMzi CX8YeF8I1rl3hwKAZ2ZDrK4eIsLDF4/RNPhn7ofeOtdk0EHmp6I2zgeJkygCqwPQ 3BGaAkwfzrleT9G+e7nDmkv0gVuhwPgZywcbdqf0Ys0498CehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXp36ltXhp/kqoBjO/vj8JCmDOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTQzZTYwYmItZDY0YS0z ZmM1LWI2NmYtYzg3ZDRhMWU0MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlo4E9AKWP0nIOEGRJ2QJFUlynIKRm4XYW8TK2lcQ8A0pZtZs9EPyev Z99MZtkrR0lm27ZGtjegrOB7LK8hqgjrlT7swWiqsWVsQhnWc8gk/CCW/EWz4sGX 1U6c3ifft6G6o9Inugg/UD4JQta+nfhivzEZsnyVGnCdYISBsUXjqTOFwqB0/8ex AWDHTD9OjzoB8awTm5LQWwi99YtsBeaj6o2PuYQwY40dskT4yCG5xB9xP9Z0DtLY ZuchlQuIOr42moNruy5U95zz3UYTtSTe35+0z/eNIMK/QmKq9X8zKBVAnWfXRGlW hqjqZ/taxGfuFeP5m5Juu9RXwYJKz/Y= -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:57 2025 by rpki-client